SLIDE 4 Question / Potential issue Answer
Autorization and access control to back-end systems Only employees at Actee APS and their development team in India have access to systems that contain data
- n clients employees. All have signed NDA agreements.
Data with personal information Data material in Actee APS’ system is deleted / anonymized so that it can never be linked up to the clients employees again, if they choose to no longer have this data active. For example if they delete their account. Logging of use Actee APS’ database setup at Microsoft Azure logs changes in our database, which contains the few person sensitive data that the Actee system requires. Rights of our users A) Right to deletion (article 17) The signed up user can always ask to get their account deleted with us. This will delete the account
- completely. At the same time, derived data will be anonymized for continued use by Actee APS. (This is
accepted in our Terms of Use at sign-up.) All requests for deletion should go to info@actee.com. B) Right to review account data (article 15) The signed up user can always ask to get a digital record of all the data that is associated to that said user. Derived data is included here. All requests regarding users right to review should go to info@actee.com. C) Acceptace of our terms and withdrawal of these Consent to our ”Terms of Use” is given the first time you enter our system upon registration. Users can see their date of consent and review our terms under “Profile” once logged in. Withdrawal of consent to our Terms of Use happen automatically upon request for deletion of the Actee
- account. In other words, you can’t have access to Actee without consent is given.
D) Right that we don’t use personal information in automatic
We don’t use sensitive information for profiling since we don’t have any given by you. We will on the other hand use derived data created by you in our system to send you fitting messages and feedback on your
- actions. We only do this upon accepting our terms of use.
